Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
File:                     wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json)
Hash identifier:          ufBV5gLxmAg6yuio5NhJgSvHLtxwi1+UvZTlu90Payw=
Subject key identifier:   D5:2F:C7:43:B6:46:7C:9C:A8:DA:B0:C7:2B:3B:0B:A9:A7:F7:7F:87
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Certificate issuer:       /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial:       01A0F5D68394B4B94874A8D7C9E10E6EF6AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
Manifest number:          0F42
Signing time:             Thu 01 Oct 2026 05:01:11 +0000
Manifest this update:     Thu 01 Oct 2026 05:01:11 +0000
Manifest next update:     Fri 02 Oct 2026 05:01:11 +0000
Files and hashes:         1: 6mjN2cFeWfG3wVcYw8P1dVWShro.roa (hash: oi7Y1F+Y4ggk+eXgRwxuyy3TiFb/d2QmgXSyELcF0f8=)
                          2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: IYzLOrPP2NGy86JjeWlwzUwvpO/k/ba7fjvbDmMtrUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f5:d6:83:94:b4:b9:48:74:a8:d7:c9:e1:0e:6e:f6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
        Validity
            Not Before: Oct  1 05:01:11 2026 GMT
            Not After : Oct  2 05:01:11 2026 GMT
        Subject: CN=d52fc743b6467c9ca8dab0c72b3b0ba9a7f77f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:22:64:75:be:50:ea:39:88:a2:a0:d0:2c:
                    ef:4a:7a:bf:e7:54:17:b3:ed:cb:5d:bd:36:e4:ae:
                    66:50:5b:ab:80:94:0c:57:ee:ec:f7:4a:f6:3c:86:
                    65:d2:ce:99:fc:57:2b:09:25:73:f3:0b:11:02:23:
                    c4:6b:27:c4:ee:4b:03:a4:2d:3d:a3:c6:49:48:56:
                    45:5d:39:e3:cb:24:5c:9a:c3:0b:6b:f5:fe:7f:88:
                    eb:49:4e:98:37:dc:b1:14:38:1b:39:de:64:c3:cc:
                    65:02:58:2e:62:a6:1d:67:69:3d:8e:a7:b3:f2:ad:
                    e8:b9:22:fe:76:8c:4a:78:6e:6a:e5:e8:73:89:12:
                    53:4d:88:d7:a4:e5:db:12:4a:e2:28:5d:79:0c:d3:
                    0a:57:ef:58:21:e0:73:23:d3:59:2d:78:e4:16:48:
                    b3:ee:c3:52:d4:88:d3:b3:e8:ea:6f:6e:e0:39:e1:
                    23:d5:c8:01:fe:a0:39:7a:7a:ed:23:de:d3:5a:4c:
                    6c:01:42:de:46:63:83:c6:73:80:4b:c2:a5:5b:3e:
                    6d:2f:e6:63:22:60:e9:0b:a8:eb:76:28:1d:44:82:
                    cf:84:c8:99:23:1b:3c:a5:8f:a5:90:5e:f9:f9:c1:
                    5e:2e:f3:4c:dd:7c:3c:83:66:16:1f:14:a9:6e:e2:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2F:C7:43:B6:46:7C:9C:A8:DA:B0:C7:2B:3B:0B:A9:A7:F7:7F:87
            X509v3 Authority Key Identifier:
                keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:f7:70:27:3f:22:da:f4:6c:58:2b:d6:3f:6d:b3:15:fe:fe:
         a0:27:81:01:b4:ae:f4:48:63:91:31:63:f5:3f:15:07:e7:b8:
         dc:60:5c:f5:f1:ee:79:57:52:a9:e2:dd:80:43:5c:61:f6:6a:
         f7:45:10:79:db:97:82:94:ff:77:cd:b5:d6:e2:77:81:aa:c5:
         a1:82:31:b7:61:64:b4:07:43:54:3a:85:36:40:e9:a6:64:14:
         13:07:40:bb:58:67:d0:47:09:e7:c1:f0:ed:7a:02:e8:a0:12:
         18:70:8b:4f:b2:04:6a:72:04:88:6e:b0:90:66:b3:a6:34:e3:
         be:cc:85:40:49:bd:d6:3e:5d:c4:14:7f:b9:e5:dd:1f:35:4b:
         79:89:40:42:0f:c1:dc:0a:4d:50:f7:f2:24:0e:36:de:b3:35:
         7f:88:f5:86:ce:cb:72:66:09:cb:57:de:a1:3b:73:2b:6b:40:
         83:d9:65:2b:5e:0a:aa:c4:9b:06:b4:36:c7:e7:47:52:30:50:
         5f:11:b3:c1:d3:c8:bb:14:7d:ed:fd:92:b0:e6:90:bc:28:b5:
         ce:61:35:d5:30:ff:ba:5f:bd:a6:9d:df:62:6a:a4:92:9e:2c:
         12:23:8c:6c:cd:d4:34:50:f6:ad:ea:3b:c5:05:ac:d0:e4:48:
         a4:23:8d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD11oOUtLlIdKjXyeEObvarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwY2FjOGQ1MjRhNWZlYzdmYzgzYTIzODMwZmJmOTIyNmE3
NjAxYWUwHhcNMjYxMDAxMDUwMTExWhcNMjYxMDAyMDUwMTExWjAzMTEwLwYDVQQD
EyhkNTJmYzc0M2I2NDY3YzljYThkYWIwYzcyYjNiMGJhOWE3Zjc3Zjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKciZHW+UOo5iKKg0CzvSnq/51QX
s+3LXb025K5mUFurgJQMV+7s90r2PIZl0s6Z/FcrCSVz8wsRAiPEayfE7ksDpC09
o8ZJSFZFXTnjyyRcmsMLa/X+f4jrSU6YN9yxFDgbOd5kw8xlAlguYqYdZ2k9jqez
8q3ouSL+doxKeG5q5ehziRJTTYjXpOXbEkriKF15DNMKV+9YIeBzI9NZLXjkFkiz
7sNS1IjTs+jqb27gOeEj1cgB/qA5enrtI97TWkxsAULeRmODxnOAS8KlWz5tL+Zj
ImDpC6jrdigdRILPhMiZIxs8pY+lkF75+cFeLvNM3Xw8g2YWHxSpbuIONQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUvx0O2RnycqNqwxys7C6mn93+HMB8GA1UdIwQY
MBaAFMDKyNUkpf7H/IOiODD7+SJqdgGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODIt
NzY1NWM4OWYxNGQ2LzEvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODItNzY1NWM4OWYxNGQ2
LzEvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0vdwJz8i
2vRsWCvWP22zFf7+oCeBAbSu9EhjkTFj9T8VB+e43GBc9fHueVdSqeLdgENcYfZq
90UQeduXgpT/d8211uJ3garFoYIxt2FktAdDVDqFNkDppmQUEwdAu1hn0EcJ58Hw
7XoC6KASGHCLT7IEanIEiG6wkGazpjTjvsyFQEm91j5dxBR/ueXdHzVLeYlAQg/B
3ApNUPfyJA423rM1f4j1hs7LcmYJy1feoTtzK2tAg9llK14KqsSbBrQ2x+dHUjBQ
XxGzwdPIuxR97f2SsOaQvCi1zmE11TD/ul+9pp3fYmqkkp4sEiOMbM3UNFD2reo7
xQWs0ORIpCONNQ==
-----END CERTIFICATE-----
Generated at Thu Oct 1 16:14:16 2026 by rpki-client